ScanMalware.com

Security Scan Report: tksv4.myconnectsecure.com

Redirected to:
https://authprod.myconnectsecure.com/ui/login/login?authRequestID=3800...
Submitted: Jul 2, 2026, 5:24:14 PMCompleted: Jul 2, 2026, 5:25:32 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is authprod.myconnectsecure.com and was registered NaN years ago.

Submitted URL: https://tksv4.myconnectsecure.com

Effective URL: https://authprod.myconnectsecure.com/ui/login/login?authRequestID=380032581829194764Redirected

The Cisco Umbrella rank of the primary domain is #8,782 of the top 1 million websitesTop 10K Site

AI Security Verdict

Low Risk

Confidence: 86%

3
Risk Score

The site triggers critical malware IDS alerts and serves heavily obfuscated JavaScript, indicating a high risk of malware distribution despite lacking credential forms.

Risk Factors
Critical IDS alerts indicating malware activity
Highly obfuscated JavaScript with base64 and charcode tricks
Presence of a login form (potential credential collection point)
Safety Factors
Domain is well‑established (over 3 years old)
Cisco Umbrella ranking within top 10 K
No Indicators of Compromise matched
No password or payment fields in the form
Top-ranked domain (Cisco Umbrella #8,782, 1163 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 8 to 3
Domain age information unavailable

Details

Page Title

Welcome Back!

Scan Type

public

Language

🇺🇸

English

(51% confidence)

Category

technology software

(26%)

Domain Information

The domain 'tksv4.myconnectsecure.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'tksv4'. The registrable portion 'myconnectsecure' spans 15 characters holding 5 vowels versus ten consonants. Breaking it apart gives 3 words: my, connect, secure. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tksv4.myconnectsecure.com

Page Load Overview

6.25s
Total Load Time
62
HTTP Requests
2
Domains
10.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:51%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:51%
Script Type:Latin
HTML Lang Attribute:ar
Text Length:141 chars
Detector Agreement:50%
Language mismatch: Declared as ar but detected as en

Website Classification

Primary Category

technology software26% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
62204.126.252.17United States
AS399968Turnkey Solutions, LLC
621--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A08132626CF4A872521200952867EA0CF8E5B44FE59EEC59B3DC81811FD7FE65C83628

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:/ar6jEAfoxOUgd1afC9tOX73+p22ME84f4/49H0aT5:c6j5fwnr2lvgATT5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3994:AYSoDAEAaAAgAGCAgkAEASAAAINACAASAAAAQAAABBggkDsKAEwlJAEACYBAUqQAgEQFgBDCAkMIUBUiABIBAAFAAAUDCAJA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7fffffffe
Perceptual Hash:f3337388cc8cdc8c
Difference Hash:0c4c0c0c04000000
Wavelet Hash:cbc3c3c3f8f0fc00
Color Hash:#b7c587

Other Hashes

Crop Resistant:0c4c0c0c04000000

Scan History

Scan history not available

Unable to load historical scan data